Python — высокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.
Релизный цикл, информация об уязвимостях
График релизов
Количество 915
CVE-2017-9233
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
CVE-2017-9233
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
CVE-2017-1000158
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
SUSE-SU-2017:0839-1
Security update for java-1_8_0-ibm
SUSE-SU-2017:0726-1
Security update for java-1_6_0-ibm
SUSE-SU-2017:0720-1
Security update for java-1_7_1-ibm
SUSE-SU-2017:0719-1
Security update for java-1_7_1-ibm
SUSE-SU-2017:0716-1
Security update for java-1_7_0-ibm
CVE-2016-9063
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
CVE-2016-5699
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2017-9233 XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD. | CVSS3: 7.5 | 0% Низкий | больше 8 лет назад |
 | CVE-2017-9233 XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD. | CVSS3: 7.5 | 0% Низкий | больше 8 лет назад |
| CVE-2017-1000158 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution) | CVSS3: 8.1 | 4% Низкий | больше 8 лет назад |
 | SUSE-SU-2017:0839-1 Security update for java-1_8_0-ibm | 40% Средний | почти 9 лет назад | |
| SUSE-SU-2017:0726-1 Security update for java-1_6_0-ibm | 40% Средний | почти 9 лет назад | |
| SUSE-SU-2017:0720-1 Security update for java-1_7_1-ibm | 40% Средний | почти 9 лет назад | |
| SUSE-SU-2017:0719-1 Security update for java-1_7_1-ibm | 40% Средний | почти 9 лет назад | |
| SUSE-SU-2017:0716-1 Security update for java-1_7_0-ibm | 40% Средний | почти 9 лет назад | |
| CVE-2016-9063 An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50. | CVSS3: 9.8 | 2% Низкий | около 9 лет назад |
 | CVE-2016-5699 CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL. | CVSS3: 6.1 | 42% Средний | больше 9 лет назад |
Уязвимостей на страницу